[{"data":1,"prerenderedAt":340},["ShallowReactive",2],{"blog-en-cold-email-rgpd-france":3,"blog-related-en-cold-email-rgpd-france":327},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"date":10,"updated":10,"body":11,"_type":321,"_id":322,"_source":323,"_file":324,"_stem":325,"_extension":326},"/en/blog/cold-email-rgpd-france","blog",false,"","Cold Email in France: GDPR and CNIL Rules Explained","Is cold emailing legal in France? What GDPR and the CNIL actually allow for B2B outreach, the obligations that apply, and the mistakes to avoid.","2026-08-21",{"type":12,"children":13,"toc":304},"root",[14,22,27,34,39,46,51,57,73,99,130,136,141,147,152,158,163,169,174,180,193,199,204,228,241,247,252,257,263,291],{"type":15,"tag":16,"props":17,"children":18},"element","p",{},[19],{"type":20,"value":21},"text","If you sell into the French market, you have probably heard that cold email is illegal in France. It is not. B2B cold email is legal in France, without prior consent, as long as you respect a framework set by the GDPR and by France's data protection authority, the CNIL. That framework is more permissive than most foreign senders assume in B2B, and stricter than they assume on a few specific obligations.",{"type":15,"tag":16,"props":23,"children":24},{},[25],{"type":20,"value":26},"Here is what the rules actually say, and how to prospect French companies without taking legal risks.",{"type":15,"tag":28,"props":29,"children":31},"h2",{"id":30},"b2b-and-b2c-follow-two-different-regimes",[32],{"type":20,"value":33},"B2B and B2C follow two different regimes",{"type":15,"tag":16,"props":35,"children":36},{},[37],{"type":20,"value":38},"The dividing line is not the size of your company. It is who you are writing to, and what kind of address you are using.",{"type":15,"tag":40,"props":41,"children":43},"h3",{"id":42},"b2c-prior-consent-is-mandatory",[44],{"type":20,"value":45},"B2C: prior consent is mandatory",{"type":15,"tag":16,"props":47,"children":48},{},[49],{"type":20,"value":50},"Sending a commercial email to a French consumer who has not explicitly agreed to receive it is prohibited. This is a strict opt-in regime: no pre-ticked boxes, no consent inferred from an unrelated purchase. If your audience is consumers, cold email is simply not an available channel in France.",{"type":15,"tag":40,"props":52,"children":54},{"id":53},"b2b-prospecting-without-prior-consent-is-allowed",[55],{"type":20,"value":56},"B2B: prospecting without prior consent is allowed",{"type":15,"tag":16,"props":58,"children":59},{},[60,62,71],{"type":20,"value":61},"This is the part most senders get wrong in both directions. ",{"type":15,"tag":63,"props":64,"children":68},"a",{"href":65,"rel":66},"https://www.cnil.fr/fr/la-prospection-commerciale-par-courrier-electronique-sms-mms-et-automate-dappel",[67],"nofollow",[69],{"type":20,"value":70},"The CNIL accepts email prospecting between professionals without prior consent",{"type":20,"value":72},", under two conditions:",{"type":15,"tag":74,"props":75,"children":76},"ol",{},[77,89],{"type":15,"tag":78,"props":79,"children":80},"li",{},[81,87],{"type":15,"tag":82,"props":83,"children":84},"strong",{},[85],{"type":20,"value":86},"The message must relate to the recipient's professional activity.",{"type":20,"value":88}," Pitching a sales automation tool to a head of sales qualifies. Pitching solar panels for their house does not.",{"type":15,"tag":78,"props":90,"children":91},{},[92,97],{"type":15,"tag":82,"props":93,"children":94},{},[95],{"type":20,"value":96},"The recipient must be able to object easily",{"type":20,"value":98},", both when their address is collected and in every message they receive.",{"type":15,"tag":16,"props":100,"children":101},{},[102,104,110,112,119,121,128],{"type":20,"value":103},"Keep in mind that a nominative business address (",{"type":15,"tag":63,"props":105,"children":107},{"href":106},"mailto:firstname.lastname@company.fr",[108],{"type":20,"value":109},"firstname.lastname@company.fr",{"type":20,"value":111},") is personal data under the GDPR. The regulation fully applies; the legal basis you rely on is simply not consent but ",{"type":15,"tag":63,"props":113,"children":116},{"href":114,"rel":115},"https://www.cnil.fr/fr/les-bases-legales/interet-legitime",[67],[117],{"type":20,"value":118},"legitimate interest",{"type":20,"value":120},", which Article 6 of the ",{"type":15,"tag":63,"props":122,"children":125},{"href":123,"rel":124},"https://eur-lex.europa.eu/eli/reg/2016/679/oj",[67],[126],{"type":20,"value":127},"GDPR",{"type":20,"value":129}," recognizes for relevant, proportionate B2B prospecting.",{"type":15,"tag":28,"props":131,"children":133},{"id":132},"the-obligations-that-apply-to-every-campaign",[134],{"type":20,"value":135},"The obligations that apply to every campaign",{"type":15,"tag":16,"props":137,"children":138},{},[139],{"type":20,"value":140},"Whether your outreach is B2B or B2C, four obligations structure every send.",{"type":15,"tag":40,"props":142,"children":144},{"id":143},"_1-identify-yourself-clearly",[145],{"type":20,"value":146},"1. Identify yourself clearly",{"type":15,"tag":16,"props":148,"children":149},{},[150],{"type":20,"value":151},"The recipient must immediately know who is writing and on behalf of which company. A masked sender or a deceptive subject line (\"Re: our conversation\" when there was never a conversation) puts you outside the legal framework, and destroys your credibility with French buyers anyway.",{"type":15,"tag":40,"props":153,"children":155},{"id":154},"_2-provide-a-simple-working-opt-out",[156],{"type":20,"value":157},"2. Provide a simple, working opt-out",{"type":15,"tag":16,"props":159,"children":160},{},[161],{"type":20,"value":162},"Every message must let the recipient object to future emails: a working unsubscribe link, or a clear invitation to reply to be removed. Objections must be honored promptly, without conditions. A dead link, or an unsubscribe flow that requires logging into an account, does not meet the bar.",{"type":15,"tag":40,"props":164,"children":166},{"id":165},"_3-tell-people-where-their-data-comes-from",[167],{"type":20,"value":168},"3. Tell people where their data comes from",{"type":15,"tag":16,"props":170,"children":171},{},[172],{"type":20,"value":173},"Article 14 of the GDPR requires informing people about the source of their address and their rights. In practice, a short line in the email (\"Your professional contact details come from publicly available sources; reply to stop hearing from us\") plus a link to your privacy policy covers the essentials.",{"type":15,"tag":40,"props":175,"children":177},{"id":176},"_4-do-not-keep-prospect-data-forever",[178],{"type":20,"value":179},"4. Do not keep prospect data forever",{"type":15,"tag":16,"props":181,"children":182},{},[183,185,191],{"type":20,"value":184},"A prospect who never responds should not sit in your database indefinitely. The CNIL recommends deleting prospect data after three years without contact from them. A CRM that tracks the date of the last interaction, as ",{"type":15,"tag":63,"props":186,"children":188},{"href":187},"/en/features/",[189],{"type":20,"value":190},"Fluenzr's built-in CRM",{"type":20,"value":192}," does, makes that cleanup a filter instead of an archaeology project.",{"type":15,"tag":28,"props":194,"children":196},{"id":195},"what-actually-triggers-sanctions",[197],{"type":20,"value":198},"What actually triggers sanctions",{"type":15,"tag":16,"props":200,"children":201},{},[202],{"type":20,"value":203},"GDPR fines can reach 20 million euros or 4 percent of worldwide turnover for the most serious breaches. In prospecting cases, the files that end in sanctions almost always share the same traits:",{"type":15,"tag":205,"props":206,"children":207},"ul",{},[208,213,218,223],{"type":15,"tag":78,"props":209,"children":210},{},[211],{"type":20,"value":212},"purchased or scraped databases with no verification of origin and no information given to the people concerned;",{"type":15,"tag":78,"props":214,"children":215},{},[216],{"type":20,"value":217},"no opt-out mechanism at all, or objections that are ignored;",{"type":15,"tag":78,"props":219,"children":220},{},[221],{"type":20,"value":222},"massive, untargeted volume that turns prospecting into spam;",{"type":15,"tag":78,"props":224,"children":225},{},[226],{"type":20,"value":227},"no response to access or deletion requests.",{"type":15,"tag":16,"props":229,"children":230},{},[231,233,239],{"type":20,"value":232},"By contrast, a company that targets professionals with a relevant offer, identifies itself, provides a working opt-out and purges its database regularly is checking exactly the boxes the CNIL looks at first. For the broader European picture, see our guide to ",{"type":15,"tag":63,"props":234,"children":236},{"href":235},"/en/blog/cold-email-gdpr-compliant-2/",[237],{"type":20,"value":238},"GDPR-compliant cold email",{"type":20,"value":240},".",{"type":15,"tag":28,"props":242,"children":244},{"id":243},"compliance-and-deliverability-point-the-same-way",[245],{"type":20,"value":246},"Compliance and deliverability point the same way",{"type":15,"tag":16,"props":248,"children":249},{},[250],{"type":20,"value":251},"The legal framework and spam filters converge: what the CNIL requires, Gmail and Outlook reward. Precise targeting reduces spam complaints. Clear sender identification and a working unsubscribe link are required by major mailbox providers for bulk senders. A clean, regularly purged list improves engagement rates, and therefore your sender reputation.",{"type":15,"tag":16,"props":253,"children":254},{},[255],{"type":20,"value":256},"Prospecting legally and prospecting effectively are the same craft.",{"type":15,"tag":28,"props":258,"children":260},{"id":259},"key-takeaways",[261],{"type":20,"value":262},"Key Takeaways",{"type":15,"tag":205,"props":264,"children":265},{},[266,271,276,281,286],{"type":15,"tag":78,"props":267,"children":268},{},[269],{"type":20,"value":270},"B2B cold email is legal in France without prior consent, provided the message relates to the recipient's profession and objecting is easy.",{"type":15,"tag":78,"props":272,"children":273},{},[274],{"type":20,"value":275},"B2C cold email requires prior opt-in: consumers are off limits.",{"type":15,"tag":78,"props":277,"children":278},{},[279],{"type":20,"value":280},"Four obligations on every send: clear identification, a working opt-out, information about the data source, and purging inactive prospects (three years is the CNIL's recommendation).",{"type":15,"tag":78,"props":282,"children":283},{},[284],{"type":20,"value":285},"Sanctions target massive, opaque practices, not targeted and transparent prospecting.",{"type":15,"tag":78,"props":287,"children":288},{},[289],{"type":20,"value":290},"Everything compliance requires also improves deliverability.",{"type":15,"tag":16,"props":292,"children":293},{},[294,296,302],{"type":20,"value":295},"Fluenzr builds these guardrails into the product: automatic unsubscribe handling in every sequence, last-contact tracking in the CRM, and ",{"type":15,"tag":63,"props":297,"children":299},{"href":298},"/en/pricing/",[300],{"type":20,"value":301},"pricing designed for freelancers and small teams",{"type":20,"value":303},". The free plan lets you launch a compliant first sequence today.",{"title":7,"searchDepth":305,"depth":305,"links":306},3,[307,312,318,319,320],{"id":30,"depth":308,"text":33,"children":309},2,[310,311],{"id":42,"depth":305,"text":45},{"id":53,"depth":305,"text":56},{"id":132,"depth":308,"text":135,"children":313},[314,315,316,317],{"id":143,"depth":305,"text":146},{"id":154,"depth":305,"text":157},{"id":165,"depth":305,"text":168},{"id":176,"depth":305,"text":179},{"id":195,"depth":308,"text":198},{"id":243,"depth":308,"text":246},{"id":259,"depth":308,"text":262},"markdown","content:en:blog:cold-email-rgpd-france.md","content","en/blog/cold-email-rgpd-france.md","en/blog/cold-email-rgpd-france","md",[328,332,336],{"_path":329,"title":330,"date":10,"score":331},"/en/blog/delivrabilite-smtp-ovh-infomaniak","OVH and Infomaniak SMTP: Email Deliverability Step by Step",0,{"_path":333,"title":334,"date":335,"score":331},"/en/blog/cold-email-deliverability-best-practices-2026","Cold Email Deliverability Best Practices in 2026","2026-05-22",{"_path":337,"title":338,"date":339,"score":331},"/en/blog/cold-email-best-practices","Cold Email Best Practices That Actually Get Replies","2026-05-17",1787316938120]